68d26ab8f862c0e85db5f8612c5fc43b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68d26ab8f862c0e85db5f8612c5fc43b_JaffaCakes118
Size

675KB
MD5

68d26ab8f862c0e85db5f8612c5fc43b
SHA1

9255668556741e08086936872080ca940acda75d
SHA256

00bd538a4b9dda34b23740cf7700e050fc68624fb2006ffe004f921dee0202a6
SHA512

ba32ad92f594321fcb6b229947c179adafef73d25253d5391fd8ab03fe813cad8a27f10a8d1f8727ea61418dac676af7695694f9953b94052f9718847a7238d6
SSDEEP

12288:WUyCWhkWYuS/RJFjix4Yg01Jb6jLAwQLTH+y2ioj67hK0ZiFSH1GcwtsPgY46Ghf:W/CWhkzVJO1Jb63qKSig1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d26ab8f862c0e85db5f8612c5fc43b_JaffaCakes118

Files

68d26ab8f862c0e85db5f8612c5fc43b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 638KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ